>>>>> "Jim" == Jim Smith <[EMAIL PROTECTED]> writes:
Jim> On Mon, Mar 18, 2002 at 02:02:38PM -0800, James Lum wrote: >> 1. use suid perl and set the owner as root ... but i do not know if you >> can run a suid perl program under modperl. (anyone? will this work?) Jim> Should be able to -- mod_perl can run other scripts. "mod_perl" doesn't "run" "scripts". mod_perl hooks handlers to various stages of Apache processing using an embedded Perl interpreter. One of the modules shipped with mod_perl is called Apache::Registry, which can transform something that looks a lot like a CGI script using CGI.pm into a giant subroutine that then gets hooked as the handler for a particular URL. This is never "run"ning the "script". It's unfortunate that it's *usually* so transparent, because when it doesn't work, it looks like something is broken. :) Thus, the answer is no - mod_perl cannot "run" a setuid perl program, unless you mean by forking via fork or system or backticks, which defeats the whole point of mod_perl handlers. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!
